
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft
File: oUygeMheRlNdkgQ4K4SXTxOwyTw.mft (raw, json)
Hash identifier: FBN9mX6ueUUmmnhR9i3gXTGK4VmQm3643J/8UNFHTXU=
Subject key identifier: 5B:6F:27:C8:B8:29:BE:42:D6:E2:A0:4C:6A:49:67:8F:AB:0F:5B:AC
Authority key identifier: A1:4C:A0:78:C8:5E:46:53:5D:92:04:38:2B:84:97:4F:13:B0:C9:3C
Certificate issuer: /CN=A91E83FE/serialNumber=A14CA078C85E46535D9204382B84974F13B0C93C
Certificate serial: 05FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft
Manifest number: 05EB
Signing time: Mon 26 Oct 2026 22:51:58 +0000
Manifest this update: Mon 26 Oct 2026 22:51:58 +0000
Manifest next update: Mon 02 Nov 2026 22:51:58 +0000
Files and hashes: 1: oUygeMheRlNdkgQ4K4SXTxOwyTw.crl (hash: YAoV1hn1w3mXDQpDWqFvYqOQR1oQ8NVQbgEquFtDer8=)
2: B90B58FCD97211ED8C2F1263C4F9AE02.roa (hash: 5d1XnWQ6pR76M6L2odGawB/ntn61DTd/opa315TiVjw=)
3: B9D90E00606311EE8844F941C4F9AE02.roa (hash: 9NLlN3W75sGcxpsbJYQQO4z8VLfzpHn4F0TnxLk1jJo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.crl
rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 22:51:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1532 (0x5fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E83FE, serialNumber=A14CA078C85E46535D9204382B84974F13B0C93C
Validity
Not Before: Oct 26 22:51:58 2026 GMT
Not After : Nov 2 22:51:58 2026 GMT
Subject: CN=6adfd98e-1281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1d:0c:eb:3e:96:c1:3a:b4:77:bc:ee:c3:24:
27:fe:e2:4a:c6:da:d9:f3:79:08:de:4b:93:90:9c:
cf:d6:e3:42:4d:6f:3f:cb:a8:20:be:f0:86:d4:99:
c4:de:34:55:67:92:0b:74:f7:74:20:53:0f:15:b1:
f1:68:05:5e:20:41:29:7a:27:ef:8a:78:f4:b2:db:
b3:38:b2:29:3d:1d:f5:6c:b3:14:e1:26:6a:ee:eb:
a0:7a:51:ee:5b:00:fd:24:be:ec:51:5f:0f:63:07:
3f:b7:8d:25:45:0a:8f:85:7e:27:ee:59:32:eb:2b:
da:71:be:f9:71:3d:87:43:48:6a:d9:80:aa:ef:06:
7b:b7:4f:60:3d:02:d4:2a:be:a6:eb:88:ae:6c:dd:
a4:2a:0f:56:99:e6:41:73:e5:bc:9f:5d:f3:67:28:
55:5e:41:ff:6a:87:76:dc:30:b4:f5:48:5e:67:2a:
33:8b:e3:9b:d6:8a:f8:b0:67:53:e2:4a:75:6e:55:
f8:98:18:fe:4b:86:a2:dc:c5:14:05:14:fa:f1:c7:
02:30:c9:85:6b:ad:7e:c2:78:96:3d:61:30:fd:2d:
ad:16:61:3e:a6:a4:2d:a0:8c:59:58:6b:14:72:38:
dc:29:be:df:7e:6e:ed:3f:28:95:ea:9a:fd:c0:30:
e6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:6F:27:C8:B8:29:BE:42:D6:E2:A0:4C:6A:49:67:8F:AB:0F:5B:AC
X509v3 Authority Key Identifier:
keyid:A1:4C:A0:78:C8:5E:46:53:5D:92:04:38:2B:84:97:4F:13:B0:C9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:65:de:c3:2d:a4:58:95:6b:22:18:b1:57:c9:b4:87:a7:f7:
62:6c:4f:b9:aa:f9:07:2c:0a:50:d6:d0:2e:48:05:99:22:97:
e2:55:c7:4c:6e:83:1b:a3:36:46:92:88:dd:d4:a8:9c:45:3c:
2e:ea:ce:52:7f:74:43:8f:7b:a1:de:dc:f0:93:65:ac:c4:37:
90:ff:88:ce:2f:fd:28:10:59:18:b1:bc:fe:c1:50:06:03:f4:
b8:bc:31:22:2b:13:ff:80:94:28:fb:ef:3f:e6:ac:07:11:5f:
c1:38:4c:f3:ac:6a:d7:7e:d0:3f:ed:78:a1:a4:cf:c9:80:f7:
af:73:00:74:01:ac:99:c2:ef:78:58:d3:66:6c:83:ab:93:e2:
e3:04:3c:b6:16:ae:7f:e6:4b:fd:17:98:4b:71:d3:21:a9:05:
8d:3e:c4:b2:ad:04:ea:52:eb:82:28:d1:0c:5e:de:fb:7f:b4:
8f:d9:b9:97:83:0a:8c:5c:6a:85:db:08:ed:14:c7:b3:bd:c3:
d8:a2:3e:e3:ba:08:11:11:84:05:fa:0c:15:ba:f1:56:b1:8f:
a9:41:82:73:59:01:d0:54:59:46:ce:2f:80:b6:72:ad:70:d0:
78:9d:c9:a3:15:b7:6b:33:3f:ac:95:bf:b6:90:bb:fa:8e:0b:
8a:76:5e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:23:27 2026 by rpki-client